Privacy Policy

Last updated: 10 October 2026

This policy explains what information Forty5 handles, why, and what you can do about it. Forty5 is run by [legal name of the business or owner], [address], which is responsible for your information. Contact: forty5support@gmail.com.

The short version

• Your learning progress is stored on your device and, when you sign in with an account, saved to that account so you can continue on another device.
• We email you news or offers only if you tick the box for it, never if you are under 16, and every such email has an unsubscribe link.
• If you subscribe, Paddle handles your payment and RevenueCat keeps track of whether Plus is active.
• We do not sell your information, we do not show ads, and this website uses no tracking cookies or third-party analytics.

What we handle

• Learning data. Your subjects and levels, lesson progress, XP, streak, mistakes for review, mock exam scores, exam date, language and display settings. This is kept in your browser or on your phone. When you are signed in, a copy is saved to your account so it follows you to your other devices.
• Account data. When you create an account: your email address, your phone number if you add one, whether you are a student or a parent, whether you are under 16, a parent’s email if you give one, and whether you agreed to news and offers by email, with the date you chose. To keep each account to one person, we also record the devices signed in to it: a random ID for each device, a short name such as the browser or phone type, and when it was last used. An account can be signed in on two devices at a time.
• Parent links. A student can give a parent an invite code. Once the parent enters it, the parent’s account can see that student’s progress, but cannot change it. Either of them can remove the link in Settings at any time.
• Subscription data. RevenueCat records which plan you bought and whether it is active. When you are signed in, it knows you by your account’s random ID, so Plus works on each device you sign in to; without an account, the app creates a random, anonymous ID for your browser instead. RevenueCat does not receive your name.
• Payment data. Paddle, our reseller and Merchant of Record, collects your payment details, email address, country and billing information to process the order, calculate tax and send receipts. We receive your email address, country and order details from Paddle, but never your full card details.
• Server logs. Like any website, our hosting provider briefly records technical data such as IP addresses and browser types to deliver pages and protect against attacks.
• Messages you send us. If you email us or send a report or suggestion, we receive what you send.

Why we use it

We use this information to provide the app, your account and your subscription (our contract with you), to keep records required for tax and accounting (legal obligation), and to answer you, keep accounts secure, stop one account being shared and improve Forty5 (our legitimate interest in running a good product). We send news and offers by email only with your consent, which you can withdraw at any time with the unsubscribe link or in Settings → Account; we never send them to users under 16. Sign-in codes and important messages about your account or subscription are sent whatever you choose.

Who we share it with

• Paddle, for payments, tax and receipts.
• RevenueCat, for subscription status.
• Supabase, which stores accounts and saved progress.
• The email and SMS services that deliver sign-in codes and, if you agreed to them, our emails.
• Cloudflare, Inc., which hosts this website and the web app.

Fonts and all other files on this website are served from our own domain, so visiting it does not send your data to font or analytics providers. These providers may process data outside your country, under their own safeguards such as standard contractual clauses. We share information with authorities only when the law requires it.

Children and parents

Forty5 is for students aged 13 and over. Users under 16 need a parent’s or guardian’s consent, which the app asks for during setup, and never receive marketing emails. Parents can create their own account and follow one or more children with each child’s invite code. Parents can contact us at any time to ask what we hold about their child or to have it deleted.

How long we keep it

Learning data stays on your device until you delete it with “Delete all my data” in Settings or clear the app’s storage. Your account and the progress saved to it are kept until you delete them: “Delete all my data” in Settings deletes your account, its saved progress, its devices and its parent links. Order records are kept for as long as tax and accounting laws require, usually up to 7 years. Emails are kept while we need them to help you.

Security

This website and the web app are served only over HTTPS with strict security headers, payment details never touch our servers, and we keep our software dependencies up to date.

Your rights

Depending on where you live, including under the UAE Personal Data Protection Law and the EU and UK GDPR, you can ask to see, correct, export or delete your information, object to how we use it, or complain to your data protection authority. Email forty5support@gmail.com and we will reply within 30 days.

Changes

We will update this policy before adding features that handle new kinds of data, such as email progress reports for parents, and tell you in the app.